Technical Information
- %WINDIR%\syswow64\cmd.exe
- 'ha###bin.com':443
- '14#.#02.240.110':5600
- DNS ASK ha###bin.com
- '%WINDIR%\syswow64\cmd.exe' /c timeout 4.7' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c timeout 4.7
- '%WINDIR%\syswow64\timeout.exe' 4.7
- '%WINDIR%\syswow64\cmd.exe'